* improved error handling for when a session isn't recoverable (wrong size, isn't decrypted, etc)
* added SessionPersistenceListener interface and support to load instances of this object from the current application context