Save sessions explicitly before redirect

Sometimes it seems that after acceptToken makes the redirect session
data is not persisted correctly. We might have hit expressjs/session#69

Persisting the session explicitely before redirect solved this at least
for me.
UPDATE generalized save-before-redirect
BUMP version number
Merge pull request #29 from florianheinemann/pr/28

ADD save-session before redirect