fix express-session deprecated warning