Constructor now takes a hash of argument, allows for the addition and removal of arguments without having to arse with the function interface (ie: how it should have been from the
beginning, damnit).
SessionHandler now calls functions in the auth object for any interaction with user data beyond storing IDs in the session tables. The
SessionHandler code does not need to know /anything/ about how user auth and storage is handled anymore.
