Session handling refactor parent

[dave2wave]

We are planning to refactor our session handling and principal cache to follow ldap changes via pubsub.

This issue should be the parent for work issues and related bugs.

[sbp]

We will talk to @Humbedooh about how much should be in ASFQuart and how much should be in ATR.