Add auth and session DB privs to catalog user, and swap out the session store implementation to one that allows us to pass in a database connection and thus rely on the same connection and auth handling as the rest of the system.  The previous one (sessionstore) could not handle a separate authSource database.