Make middleware dependencies explicit

clj-cas-client depends on both the params and session middlewares. The
params middleware is idempotent, so there's no harm in adding it
ourselves. The session middleware must only be added once, so document
the dependency in README.