refactor(session): remove Session.config

One more blow to Session
There is now only one more spot in fxa-client that uses Session. :+1: