Make sure bolt_session cookie gets refreshed. Fixes #366.