[FastAPI] aurweb.db.session should be a scoped_session

As brought to my attention by @artafinde, we might want to be using a scoped_session. scoped_session behaves as one would expect without data races in a multi-threaded scenario, and we may have multiple threads in a production scenario.

We currently use a Session object created via SQLAlchemy's sessionmaker.