In transitioning from loader page to apps page, sessions are needed

Implement sessions with code-based timeout, so that session will only last as much as configuration allows regardless of client activity (unlike default php sessions)