Persistent managed sessions

This branch manages user sessions in a persistent store and no longer in the http servlet session.