express-session UPDATED PART The fork is working for session without secret. The document is on the way.