Check for Session Fixation

[adamcaudill]

We should implement a simple check for session fixation (session cookie not updated after logging in). We will likely need to use Selenium for this, given the odd ways that some login forms work.

This is a simple enough issue, that there's no reason to test for it manually.

[adamcaudill]

Blocked by #220