Document session object

Also allow http handlers to return standard Rook responses instead of
httpResponse objects.