Function session_cookie 

pub fn session_cookie(req: &Request, token: &str, max_age: i64) -> String

Set-Cookie for the session (an empty token with max-age 0 clears it).