Why pass express and db to start(), rather than having lib/sessions.js just require() those modules itself?