I am using express-sessions, cookies, and React, to build a login system. Currently, once the user is logged in, they are allowed to make requests to certain routes, but if