Support saving sessions in alternative backing stores

[moio]

Currently XMLRPC session tokens are stored in process memory, which means sticky sessions are necessary in a scale-out/HA setup.

This is a violation of principle VI of the Twelve Factor-App manifesto, and could be addressed by supporting different backing stores for sessions.