bot/web: remove sessions code