cleanup session a bit, add max age on session struct