Fix read-string security flaw in cookie session store

This flaw allowed an attacker who has gained access to the session
store encryption key to execute arbitary code via the #=() form.
Ensure written session data is readable

This patch protects against data structures that can be written
via pr-str, but do not result in the same data when read back.
Released 1.1.7