Improve the javadocs of InMemorySessionManager.
Make the InMemorySessionManager.getSessions() return an unmodifiable map to avoid invalid modification of the sessions map.
Introduce a locking architecture in InMemorySessionManager to protect the session map in a concurrent application.
Backport InMemorySessionManager.removeIdleSessions from downstream applications. This supports removal
of sessions that exceed an idle threshold.