Sign session to prevent brute-forcing

This patch sign emitted cookies to prevent session brute-force.
It also refactor session interfaces to avoid code duplication.
For the ease of testing external dependencies such as memcached or redis
are installed automatically using buildout.
When launching tests using make external services are also
started/stopped automatically.