cookieSession: use cookie store from express-session