Add users, session ownership and metering

[PeterNerlich]

Users should own sessions and be the only ones able to manage them. Translated characters etc. should be metered so limits can be enforced in the future.