Improved GET /_session

* Always works, even if not logged in
* Returns CouchDB-compatible JSON struct. (POST does too, now.)
* Result struct indicates whether BrowserID is enabled.