Rework SessionInfo to support setting of arbitrary attributes. Remove accessor for username and treat username as a standard attribute.
Rework SimpleSessionInfo to support a mutable sessionID in sub-classes.
Extract removeSession method