Add rest_cherrypy tests for the /run entrypoint; fix session reference when sessions are disabled

This also localizes some of the test mocks since we're in Salt core now we might not want to mock everything by default.  ^_^