app/scripts/controllers.js: Hit /session to check for an existing session

And check session.person to see if we're authenticate.  If we are, hit
/person to figure out our name and other metadata.  With this commit,
refreshing the page no seems like it logs you out (the session cookie
survives the refresh, and we can use it to restore $rootScope.person).