sketching out the session creation & invalidation lifecycle