Placed cookieParser above session middleware