ADD save-session before redirect

Avoids a bug in Express that allows a redirect (and request of the new page) before the session is actually saved. This can result in a loss of the login state. Closing #28