feat(session): add optional verify fn to session-strategy

[chickendreanso]

Closes #4

• session-strategy accepts optional :verify fn to re-validate session identity per request
• Verify returning nil skips the strategy (stale session); returning a value authenticates
• Add session-strategy-schema to schema namespace