Switch to Mongoid session store

Rather than cookies. An upgrade to rack-cas for Mongoid 4 compatibility
was required to make this work.