Session: non-native session handler with locks is back!

I was sad the native handler doesn't care about locks, so I had to revert the old session handler written in PHP. The native is still default, but this pull adds new option to turn it back on

redis: session: {native: off}