Add `session-middleware` to `fetch-router`

[mjackson]

The session middleware is responsible for populating the request context's session property.

Session middleware should properly retrieve the current session when a session cookie is sent in the request. If no session cookie is sent, a new session should be created.

When this work is done, the bookstore demo should be updated to use session middleware for automatic session management.