change to use session for auth

+ replace BearerAuth to cookieAuth in swagger
+ add swagger.yaml to nodemon watch list

server/src/middleware/session.js

@@ -0,0 +1,20 @@
+import session from 'express-session'
+import MongoStore from 'connect-mongo'
+
+import config from '../config.js'
+
+export default (db) => {
+  console.log(db.constructor.name)
+  return session({
+    secret: config.jwtSecret,
+    resave: false,
+    saveUninitialized: false,
+    cookie: {
+      httpOnly: true,
+    },
+    store: MongoStore.create({
+      mongoUrl: config.db,
+      collectionName: 'loginSessions',
+    }),
+  })
+}