consolidate ServerConfig
make Session abstraction an abstract class
add scope to JWT