Rack middleware to regenerate the session cookie when it was written with the old secret

Aha, thanks :) Made some improvements to those spec descriptions in 9cb74f7