Use cache store for sessions when memcached is not available

Using cookie store is problematic because there is a limit to the
amount of session data you can store, and we sometimes overflow.