Add redis sessions and reauth to admin app

This PR also contains the redis session commit, plus changes things to set a
prefix. I'm happy to rebase the original PR, but it might be easier to commit
this as a single PR.
Could we break this down a bit so it's more self explanatory? Is it possible to also test this with some mocking of redis session object?