Removed userEvent > moved to userAuthAction method.
Removed unused var.
Added SessionManager and custom SessionSaveHandler class.
Regenerate Id when a new session has been created.
Gracefully start session.