gorilla/sessions has long needed an official release (although, strict version tags were less useful prior to vendoring tools)
This version is the last version that supports gorilla/context going forward due to the incompability between its global map of *http.Requests and Go 1.7's new http.Request.WithContext(). The shallow copy of the request changes the address, causing gorilla/context's map to point to the old request.