removed session rotation (and response async flag), made session eventful, +\session::logout() helper
docs