Fixed #22634 -- Changed Session and SessionStore to be easily extendable

Introduced abstract base model for Session, and properties enabling the developer to override session model class used by session store and the session store class used by the model.

Allowed to override KEY_PREFIX via the cache_key_prefix property.
Is there a specific reason to use the name `SessionStore` instead of `CustomSessionStore`? Importing `SessionStore` as `DBStore` in line 2, then creating a subclass named `SessionStore` looks hard to read to me.