Generic session manager (i.e. not depending on cookies or socket connection, etc.)