Limit concurrent sessions

Should fix OOM problems and also DOS by just spamming a route
page url.

Fixes #23