Sessions

https://www.getpostman.com/collections/dc509a1f527d4baab0c3

@DuaneGarber 

session cookies will look like:

```javascript
{
   username : null || 'string',
  email    : null || 'string',
  signedIn :'bool',
  issued   :'date',
  hash     : 'has of username, email, and issue date'
}
```

we can change the cookie structure later, but we should update`sessionToSeed()` to include the new properties for the sake of entropy

* session read (should 401)
* account create (should 200)
* session read (should 200)
* session destroy (should 200)
* session read (should 401)
* session create (shuold 200)
* session read (should 200)]