slight refactor
sessions now loaded via cookie
added timestamps
added debug
session timeouts completed