Cookies for sessions are created on "set"

Before this fix, session was created even if user has not sessions vars.
That was a memory problem, and some cache servers had some trouble with
it.