added very basic sessions using express session middleware.  added logout api endpoint