title: How does passport js stores user object in session?
body: <p>I am using node/express with passport in my development. I came across an article which says:</p>
  
  <blockquote>
    <p>Express loads the session data and attaches it to the req. As passport stores the serialised user in the session, the serialised user object can be found at req.session.passport.user.</p>
  </blockquote>
  
  <p>But to my surprise, the value for sessionID stores in the browser cookies remain the same before and after login. So where does the serialised user object is stored? </p>
  
  <p>I thought that it was stored in the user <code>sessionid</code> cookie initially but it seems that this is not the case as I still can access my user object with <code>req.session.passport.user</code></p>