pass in sessionid explicitly to YUI uploader

get around Django 1.5 change to use HttpOnly cookie for session
Merge pull request #2354 from dimagi/hotfix-multimedia

pass in sessionid explicitly to YUI uploader