updated package.json to include session middleware