Send back the name and value of the session cooke on /user/authenticate.
Only return the session cookie if session=1 is passed.