tried running this out of the box and it's missing the session-cookie in the package.json also the .gitignore is missing an entry for the .env file