stale ip handling: use logger, initialize timestamp in session if it is not there