added cleaner session-handling

additional memcached entries to map user's mail to a list of his sessions
-> all admin/user-actions (delete, activate/deactivate, pro-/demote user) will now be updated in the user-sessions