Add skip_empty_sessions option to enable skipping of session storage if session only contains the csrf token.