checkpoint session management - refactored how sessions are created
when a session expires access to it is prevented and a new one is provided