Update demo to demonstrate auth via HTML without forms auth. Add session to envelope. Enable use of connect-redis by making session lib reference available at top level. Document session configuration. Clean up linting errors. Remove console.logs.