remove notion of session ID from database
update documentation about sessions and hash lengths