Add possibility to specify session configuration in web.xml file

* Add functionality to persist session data serialized
* Add synchronization between session factory and manager
* Use servlet path + path info for security validation