Use sessions to control form visibility

Fixes https://github.com/ongoworks/reaction/issues/109