JSESSIONID retrieval should be more robust when there is no cookie

If you're using an anonymous authentification or a SSO authentication, in some case (first access to Nuxeo), a cookie is not set with the jsessionid.
A NPE can occur when building the link used by LiveEdit.

To be more robust, we should use the session related to the request to get the jsessionid.