Session Middleware in Express

You are using the express-session middleware for cookie session maintenance.

What consideration would you need to take in case you want to use this for a production environment?

Options

1. You should never use it in a production environment
2. You should use an in-memory store in the production environment
3. You should set up a session store for the production environment
4. No changes are necessary