Loads the session if available, and creates one if not. May write a session id cookie to the passed cgi object.