track sessions and, optionally, users
