Move setting session.mtime from dbapi to web session manager
clean_session was broken since the switch away from dbapi on the web
side, since session.mtime wasn't being set anywhere.
Nicolas Chauvat <nicolas.chauvat@logilab.fr> [Fri, 14 Mar 2014 11:20:53 +0100] rev 9571
[web] implement cross origin resource sharing (CORS) (closes #2491768)
Partial implementation that is enough to get started but leaves out
some of the advanced features like caching and non-simple methods
and headers.