simplify lookup_session()
add shv_session_store()
free sessions when resetting default mem store
implement session refreshing