session-worker: Move PostLogin / PreSession / PostSession here

Pushing these up to the session worker dramatically simplifies the
interface for the slave, which will allow us to kill the slaves as
separate binaries.

Ideally, in the long-term, these scripts should go away.