app.post('/login', (req, res) => {
  username = req.body.username;
  password = req.body.password;
  queryString = 'SELECT * FROM accounts WHERE username = "' + username + '";';
  connection.query(queryString, function (err, result) {
    if(result[0] == undefined){
      console.log("user doesn't exist");
    }
    else{
      var savedPass = result[0].password;
      var json = {}
      if(bcrypt.compareSync(password, savedPass)) {
        console.log("success!")
        req.session.user = username;
        json.response = "correct";
        console.log(req.session)
      }
      else{
        console.log('wrong pass, try again');
        json.response = "incorrect";
      }
    }

    res.send(json);
  });
})

Session {
  cookie:
   { path: '/',
     _expires: 2017-12-10T01:25:45.023Z,
     originalMaxAge: 60000,
     httpOnly: false },
  user: 'fuckun' }
}

Session {
  cookie:
   { path: '/',
     _expires: 2017-12-10T01:25:48.499Z,
     originalMaxAge: 60000,
     httpOnly: false } }