added a session manager

expired sessions need to be manually cleaned out to prevent memory leaks, the session manager takes care of expiring default in-memory sessions