Sessions in database (fixes  #121) + security fix

Important: when running locally, be sure to clear your cookies and add the `session` table to your database.

```CREATE TABLE `session` (
  `id` varchar(36) NOT NULL DEFAULT '',
  `data` text,
  `created` datetime NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8;```