upgraded express-session to 1.6.5