Cleanup old sessions

It seems that the current session id implementation is not deleting all of the old (closed, invalid) sessions from the database. The desired behaviour should be to delete all sessions that are not in use anymore.