Add a "this.session" entry for methods in the docs.

Pull out the session object into its own documentation section.
Merge branch 'session-hooks' into hash-login-tokens