changed convention for session storage. We now pass in sessionStore which derives from the new express-session module