Added JWT session persistence. Closes # 9.

Finished the JWT session handler so that it's capable of persisting
the session and flash state to a JWT token.