removed caching, it should be left to the user
extra powerful exceptions
added in login, login attempts and updating a custom session

still requires lots of testing