diff --git a/package.json b/package.json
index 94ae9c147..e575a034e 100644
--- a/package.json
+++ b/package.json
@@ -45,6 +45,7 @@
     "eslint-config-airbnb": "^5.0.1",
     "eslint-plugin-react": "3.16.1",
     "express": "^4.13.4",
+    "express-session": "^1.13.0",
     "fbjs": "^0.7.2",
     "helmet": "^1.1.0",
     "history": "^1.17.0",
diff --git a/src/server/api/posts.js b/src/server/api/posts.js
index 648195ad1..bfa9d5a5f 100644
--- a/src/server/api/posts.js
+++ b/src/server/api/posts.js
@@ -5,6 +5,7 @@ const router = new Router();
 import fakeDB from '../fakeDB.js';
 
 router.get('/', (req, res) => {
+  req.session = 'test';
   res.statusCode = 200;
   res.json(fakeDB);
 });
diff --git a/src/server/server.js b/src/server/server.js
index abe30483e..acd4e5ef4 100644
--- a/src/server/server.js
+++ b/src/server/server.js
@@ -1,5 +1,6 @@
 import path from 'path';
 import express from 'express';
+import session from 'express-session';
 import webpack from 'webpack';
 import webpackMiddleware from 'webpack-dev-middleware';
 import webpackHotMiddleware from 'webpack-hot-middleware';
@@ -51,6 +52,10 @@ server.use(helmet.frameguard('deny'));
 server.use(helmet.ieNoOpen());
 server.use(helmet.noSniff());
 server.use(cookieParser());
+server.use(session({
+  secret: 'keyboard cat',
+  resave: true, saveUninitialized: true
+}));
 server.use(compression());
 
 // API