Adds crowd.token cookie in response header.

Signed-off-by: Pasi Savanainen <pasi.savanainen@reaktor.fi>
Stops creating new session tokens when crowd.token is valid

Signed-off-by: Pasi Savanainen <pasi.savanainen@reaktor.fi>