Subscribe to 'sessions' by session ID

Fixes #172. A more complete solution than #173. Takes advantage of the 'sessions' subscription to do away with all of the "session-*" entries in Mongo.Session. Moves some session-clearing to the server.