store sessions in the cache by default all the time

let's store session data in whatever is used for the server-side cache as it's more secure than cookie based store.