support url aliases.
code comment style.
better type hints for shutdownlistener.
don't call shutdown function for non-drupal requests.
load the user with roles when the session is started.