Make HTTP::Session2 as primary session management library

 * HTTP::Session2 manage XSRF token by itself.
 * HTTP::Session2 sends Set-Cookie header if it's needed.