I have a login route that if a user signs in successfully, it attaches the id of the user from the database to the req.session.user property of the request object: