var session = require('express-session');
app.use(session({ secret: 'securedsession',
resave: false,
saveUninitialized: true,
cookie: {
    secure: true,
    resave: true,
    saveUninitialized: true,
    maxAge: new Date(Date.now() + 3600000)
    }
}));

var auth = function(req, res, next) {
if (req.session && req.session.user === "admin" && req.session.admin)
return next();
else
return res.sendStatus(401);
};

app.post('/verifylogin',function(req,res){
var username = req.headers.uname;
var password = req.headers.pwd;
if (!username || !password) {
res.send('login failed');
} else if(username === "admin" || password === "adminnn") {
req.session.user = "admin";
req.session.admin = true;
res.contentType('application/json');
var data = JSON.stringify('/admin');
res.header('Content-Length', data.length);
res.send(data);
}

app.get('/logout', function (req, res) {
req.session.destroy();
res.send("logout success!");
});

<script src="http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js"></script>
<script type="text/javascript">
function login(){
var uname = document.getElementById('uname').value;
var pwd = document.getElementById('pwd').value;
$.ajax({
  url : '/verifylogin',
  type : "POST",
  headers : {
    "uname":uname,
    "pwd" :pwd
  },
  success: function(data) {
    window.location = data;
  }});
  }
</script>
<h1>Login</h1>
<p>
<label class="control-label">Username</label>
<input type="text" placeholder="Username"  id="uname"/>
</p>
<p>
<label class="control-label">Password</label>
<input type="password" placeholder="Password" id="pwd"/><br/>
</p>
<p>
<button type="submit" class="btn btn-primary" onclick="login()">Login</button>
</p>