Add defaults to express-session

This removes the following deprecation messages:

```
express-session deprecated undefined resave option; provide resave option main.js:43:9
express-session deprecated undefined saveUninitialized option; provide saveUninitialized option main.js:43:9
```

Relevant documentation: <https://github.com/expressjs/session#options>