Inject database connection into session wrapper.
PSR-2 fixes.
Extract separate CookieKernel middleware from session wrapper.
Rename to session kernel.
Actually return response.