Use a database table for holding sessions

This would avoid issues with invalidating session, which cannot currently be done. This was cause for the intial session length to be short.