added express-session to npm dependencies