Replaces the simplistic session null options initializer

This fix constructs a complete session options object if one doesn't exist, including a default cookie object as well. The previous fix submitted was a bit too simplistic and made assumptions about the way session options are processed within expressjs. A fully constructed options object should avoid any problems with future changes in expressjs as well.