expressjs/session — pull request #32 by kolonist (2014-05-01 13:24:30+00:00)
Title: Prevent session ID theft

Store IP and User-Agent while creating session and check them every request. This should prevent using stolen session IDs.