Store the session in the http.Request context

Add methods to the httpsso package to retrieve authentication info
from the current session (by passing an *http.Request object).