seprate session manager and handler
add expire time for default handler
rewrite session