Session Tethering

gateway and server now each have a copy of the user’s session and these
are kept alive when client pings the gateway. additional security has
been added between gateway and server, however not the final word.
this closes #35