express + cookie-session + socket.io is a bitch...but got it working :D