Don't modify the session on every request; only modify it when the remember cookie needs to be set
Adds a test to ensure that empty sessions are not modified
Merge pull request #98 from bslatkin/master

Don't modify the Flask session unless there's a reason to