use beaker intead of bottle-session for session management