I believe you've missed a pair of parenthesis on passport.session method call. Try app.use(passport.session());