ws: When cockpit-session sends creds use/store them

Closes #1226