fixes for ORM, Session and Authentication

fix IObject::serialize(), fix session start, fix session storage creation