reverted some bs3 changes
fixed problem with too many sessions
always reset the session when auth session expires