Cleaned out old session code since now using JWT.