Save sessions in deviceObjects, test using fake_api, minor tweaks
Fix longstanding(?) attachment bug