memory store now thread safe
add refresh test to session_test.go
etc.