session and persistent cookie

with commonplay/frontoffice-dashboard#7