server: refresh AuthSession on /_session

Fixed request handler for /_session to send AuthSession cookie back to
the client in order to refresh the session ticket used by couch login.