Send session information to the API server

- Construct the API root path from the dataset root path
- 'Bootstrap' (via JSONP) the API server session cookie
- Send session cookie and CSRF token to the API