mattdrayer/api-session-del-user-check: Guard against some negative cases

@chrisndodge, here's an enhanced session delete operation which guards against the negative cases we discussed.  I was also going to include a guard against a bad session engine specification, but it appears the middleware catches that problem prior to the execution of the view.