- update session atime on reload
- add API sessions put method
- handle session expire or reload