everywhere: use different session cookie names

If the user is hosting the dashboard in the same domain as
their blog (with a nginx suburi, for example), the two session
cookies clash; logging into one service logs you out of the other.
With this patch, both have separate names.

Fixes https://gitlab.com/commento/commento-ce/issues/49

api/owner_login_test.go

@@ -24,8 +24,8 @@ func TestOwnerLoginBasics(t *testing.T) {
 		return
 	}
 
-	if session, err := ownerLogin("test@example.com", "hunter2"); session == "" {
-		t.Errorf("empty session on successful login: %v", err)
+	if ownerToken, err := ownerLogin("test@example.com", "hunter2"); ownerToken == "" {
+		t.Errorf("empty token on successful login: %v", err)
 		return
 	}
 }