Session closing events did not seem to be fired. There was no reaper process to check so I've added a SessionReaperJob and made some amendments and introduced a PermissionsAwareJob so that the correct principal context can be added.