saveUninitialized: true was the culprit in my case, basically this tells Express to insert a new session into DB without manually created session with user id added
saveUninitialized: true