abstracted the storage engine.
moved encryption out off the data layer. it should be moved up to the session middleware