Session handling management added to user-management module

Fixes #16
Implements a new service to create / read / remove user login sessions with optional expiration.
A default InMemory implementation is included.
A specific mvc controller is included, with access security rules