Session mechanism review and refactoring

[gpbl]

• refactor code to make session easier to manage
• use express session cookie instead of our own cookie for saving session data
• add features to authenticate a user as page