So I've set the session according to the documentation for express-session, as far as I can tell.