Session end handling.

Log single events when adding it to the attack session.
Time out sessions in the log worker.

There is still the action missing when the session gets removed from the list. I would say we add a session table and link from there to the events.