Add redis sessions and reauth to admin app

This PR also contains the redis session commit, plus changes things to set a
prefix. I'm happy to rebase the original PR, but it might be easier to commit
this as a single PR.
Sorry, I wasn't clear, this will fail as well if they Authorization header is badly formatted. ie. it doesn't have a space in it.