seperate changing password from reestablishing session
clear session on failure or changePassword.  add session wrapper to handle failed sessions.
bump version
don't default message from: and add heartbeat messages for debugging