* use $CFG->session_handler_class to determine which type of session is used * if not set, use $CFG->dbsession instead