swapping to custom DB session store, seems stable