Prevent duplicate session cookies if possible [IMMUTANT-272]

If ring and the servlet container are using the same session cookie
name, we can detect that and remove ring's version of the cookie from
the response.