Remove redis session

Managing token caching and reauth has been moved back into stagecraft to
avoid a call back to signon for every request there.
Log user out on 401 not 403

Unauthorized and Forbidden have been split out in stagecraft now. We
should not sign the user out if they do not have sufficient permissions.
Merge pull request #41 from alphagov/remove-redis-session

Remove redis session
Alphabetise requirements

because pedantry
Merge pull request #43 from alphagov/sort-requirements

Alphabetise requirements
WIP

 - basic file upload works
 - errors are shown when there are problems parsing spreadsheet
 - basic styling
 - tests added for json responses - need refactoring as duping non json
   tests