Sessions must be locked when active to avoid concurrency issues

@cmair would do something like this: mkdir LOCK.dir or die(); do_stuff(); rmdir LOCK.dir