switched to concurrent hashmap for session mgmt