Update express.session() to express.cookieSession()

Includes an awkward change because Express had been just borrowing
from Connect's session middleware.  Still need to fix the code in
examples/sessions/redis.js, because
    express.cookieSession({ store: new RedisStore })
does not work.