Use cookie to get session id instead of sending from client side

This fixes https://github.com/socketstream/socketstream/issues/359 for me.

It also fixes IE9 under socketstream 0.3.3.  I think I was having an issue with IE security due to client side reading of the cookie.