caolan/cookie-sessions — pull request #22 by pdobrev (2012-05-08 19:51:10+00:00)
Title: Shouldn't readSession return an empty object {} (as the comment on the t...

...op of the function says), instead of undefined if the cookie is not present?

Some middlewares that rely on the session (like everyauth) complain that it is undefined. Does this change have some security implications?