backend: create session with session id and cookie

[srflaxu40]

• need to implement sessions.
• need to create httponly cookie.
• need to create mongo or postgres table to hold session data / clear session data on logout.