separated session data by app, so admin session data is separate from front-end session data is separate from CLI session data, fixes #30