I have a function to login
app.post(\'/doLogin\', function(req,res){ db.users.findOne({username: req.body.username}, function(err, user) { if
If {secure:true} is set, and you access your site over HTTP, the cookie will not be set. So, each request will create a new session.