session - grecaptcha and req.session best practises

Question

Are there any important differences between using grecaptcha for a token to use each get request and req.session.uid ? I tried req.session and it returns 'undefined'.