bumped express to version 4.10.x and express-session to version 1.9.x