support for objects in cache
don't use cherrypy sessions on lastfm auth page

.. and remove usage of them completely