$ npm install express-session
var session = require('express-session')
ex
app.use( session({ secret: '@codestates', resave: false, saveUninitialized: true, cookie: { domain: 'localhost', path: '/', maxAge: 24 * 6 * 60 * 10000, sameSite: 'None', httpOnly: true, secure: true, }, }) );
will have a new session
cannot access session
session updated
session saved