Now generates a new sessionkey if it has expired in the backend rather than reusing it
Moved sessions backend to its own module