What if we don't want to disable sessions?

I'd say this should be a config.php setting, for those who need it.