Simplify how Skylith is mounted
Move session handling out of Skylith into the embedding service; clarify API between Skylith and service; avoid an HTTP roundtrip