no more need for webapp2.sessions