CI-44: Better XAPI session management and logging

Store session-origin (including user-agent) in the session object.
In audit logging, record logouts as well as logins.
In session gc, add 3rd pool (local sessions) and log session counts by origin.