Session and cookie fixes

* Fixed many bugs with sessions and cookies.
* Deprecated manipulating cookies or sessions within Response objects.