Session cookie name

The default session cookie name is now randomized on a per-application basis, in order to reduce the risk of cookie conflicts if you are developing multiple applications on the same machine. The default session cookie name now takes the form "session_{8 random characters}", and this can be configured to a different value at runtime via the --session-cookie-name flag or SESSION_COOKIE_NAME environment variable.