Replace sessions with client-sessions

To make kpi-dashboard consistent with our other products, and to keep sessions alive passed a server restart, we should add `client-sessions`.

This sets us up for being able to scale the dashboard without a server side session store.

Note: to test, you probably should clear your old cookies from your test env.

/CC @kparlante