Revert "no module-global session (#597)"

This reverts commit c56412a1d54dd0f10c8ae20f3f846f66727f5fef.

 - The Requests library advertises itself as thread safe.
 - Cookies aren't so interesting, but keep-alive /
   connection pooling would be nice to have.