Simplify session manager

Only the session manager should start a session.
Ensure only POST methods are defined - any GET method access results in
the session getting destroyed. This also acts like a (very basic) form
of security.
index.php also links to profile.php that will soon be submitted.
Simplify session manager

Adding the session manager file to the commit!
(the previous commit is incomplete...)