Implement the beginnings of the session handler.

The session handler is now able to create a tracking ID.  It uses the
securecookie package from the Gorilla Web Toolkit to make it harder to fake.
Implement session fetching.

The session data is now fetchable from the session handler.  While the memory
session can return old sessions back, currently the handler just always
make a new one.