fmt, and remove session from session map on expiry, probably doing it in the wrong place