diff --git a/lib/app.js b/lib/app.js
index <HASH>..<HASH> 100644
--- a/lib/app.js
+++ b/lib/app.js
@@ -221,6 +221,12 @@ app.connect = function (callback) {
             if (req.signedCookies.jsbin) {
               console.log('we\'ve got an old cookie here!');
               console.log(req.signedCookies.jsbin);
+              // TODO: This is where we need to redirect to login and flash a message etc
+              // Current issues, redirect end up in endless loop because cookies don't get
+              // updated to use latest secret, second issue is we don't have access to res.flash
+              // this high up in the stack. We can't move it aboce this either as res.flash is
+              // dependant on req.session, for which the middleware is below, and dependant on
+              // this. AGHH!
             }
             next();
           });
Add TODO, So i can pick up work tomorrow