pam_systemd: use F_DUPFD_CLOEXEC when dupping session fds

http://lists.freedesktop.org/archives/systemd-devel/2014-May/019034.html
replace more dup() by F_DUPFD_CLOEXEC