Remove session_timeout module

It’s causing strange errors in Rails - possibly incompatible with 4.1
Build out session handling
Add session resource