This is a follow-up ticket after #198 **What can be improved** - [x] Session should be removed from the owning collection on disconnect to avoid OOM - [ ] Session ID should belong to the ServerSession object itself - [ ] Sessions should be cleaned up when the server is stopped