update session to support custom SessionAttributStore

update session to support custom SessionAttributStore