iron-session works really well. Just need a small interface on top, and to transfer the Set-Cookie headers to the response properly. Will distill what I have into a guide.
iron-session
Set-Cookie
zth
