move session related functions to ctdlproto/serv_session.c