Sessions

https://www.getpostman.com/collections/dc509a1f527d4baab0c3

@DuaneGarber 

session cookies will look like:

```javascript
{
  username : null || 'string',
  email    : null || 'string',
  signedIn :'bool',
  issued   :'date',
  hash     : 'hash of username, email, and issue date' || null
}
```

we can change the cookie structure later, but we should update`sessionToSeed()` to include the new properties for the sake of entropy

* session read (should 401)
* account create (should 200)
* session read (should 200)
* session destroy (should 200)
* session read (should 401)
* session create (shuold 200)
* session read (should 200)]
I know you want to focus on hockey, but I believe this could have broader uses so I would try to avoid using hockey related terms in vars ... but that's just one guys opinion