use wp-session-manager instead of $_SESSION

expects wp-session-manager plugin to be installed.