switched to connect-cookie-session which looks a lot better, will probably require people logging back in, can't do anything about that.