Use signed cookies for sessions instead of file

This update is a workaround for tests failing when using the file backed
session storage. Nevertheless using signed cookies seems more elegant
than using tmp folders or session directories which adagios defaulted to
using tempfile.gettempdir() since SESSION_FILE_PATH is not set.