offline session management (close #67)
session time data: auth.startTime & auth.endTime
fix #75: resolve promises to allow code chaining