addes session.expires to config.json
now sessions are only stored if there was a successful login
adds shared data middleware
fixes bug in protocolhandler
few little internal changes
removes legacy php files