Change session storage used by express-session

[sinnottj-rse]

The documentation to express-session states:

The default server-side session storage, MemoryStore, is purposely not designed for a production environment. It will leak memory under most conditions, does not scale past a single process, and is meant for debugging and developing.

An alternative session store (e.g. connect-mongodb-session) should be used instead.