create EPL sessions in onRequestDoc, not in onLogin (fix for #13 and #5)
clean up old EPL sessions every hour
don't create sessions for groups with whom the user is already authed
Merge branch 'epl-create-sessions-in-requestdoc', fix #13, fix #5