changed to use option to prevent dancer session engine from sending cookies

The current version generates a plack error (duplicate cookie sent-ish message) since the dancer session code will automatically update a session on read and send the cookie.

I've added a patch to dancer (accepted in last release) to allow reads of session data w/out it updating the session. This pull request has the code update to plack middleware to use the new option.