express sessions with with JWTs

[BenNewman90]

• [ ] only the logged in user can access their page
• [ ] The protected routes (updating user info) are protected with JWTs