fix strlen print formatting
add session management based on
http://openid.net/specs/openid-connect-session-1_0.html (draft 21)