using the session class of the requests library
moved to central config dirctory at /etc/upay
more parameters in the configuration file
using flask's session object to track the user
fixes timeout handling with requests sessions