Design a Session Store

Design server-side session management for web apps: create session on login, store opaque session id in cookie, map to user id and metadata in a fast store with TTL sliding expiration. Support logout (invalidate) and rotation on privilege change.