server tracks sessions, seperate action classes, deactivate user working