strip out most of sessions.js, use cookiestorage for sessions #202