code: function(req, user){
        req.session.authenticated = true;
        req.session.user = user;
      }
docs: Attaches a user object to the Express req session
  
  @param  {Express request} req  the Express request object
  @param  {Waterline DAO} user the waterline user object