Session data

Rails might well change responses based on Session - so some kind of session extraction needs to happen. That probably also needs to be filtered, since we don't really need the whole session - e.g. we need to know user/maybe roles, not the whole Warden stack.
