api/auth/auth: add SetUser and SetSession calls to interact with gorilla/context in type-safe way
api/v0/sessions_test: initial commit, add TestPostSession