Remove stale sessions when updated

Remove stale sessions when posting a new session.
Set the cookie to an empty string with a past date when deleting a session (will clear client cookie).