allow apps to enable modules. add support for session_header_module