Refactor options for run manager and abstract session

As discussed yesterday not white-listing user is fine. But we should update test cases to make sure whitelisted options are passed through, and non-white-listed ones are not.