Sessions now synced between Auth and session handlers, keys now checked against sesison first, then auth and use a new seperate session lifetime to drop from the session store, this means new identity providers can be added without sacrificing speed