Best practice for session verification on consequent requests after login

Question

I\'m working on a multi role Node Application which uses express-session, Redis and MongoDB. The application has a primary account under which there can be multiple