Make session creation lazier

Don't create a session just because someone attempted to read data from
one.  I.e. just because someone checks C< session("logged_in") >> don't
create a new, empty session.

Addresses GH Issue #155