currently sessions only contain a timestamp. in the future we need + session that contains more info (remote ip, device type, location, etc.) + entrypoints to dispose specific session