#3 Old confirmation and session entries don't get removed

[Christian Neumann]

Entries in the tables 'confirmation' and 'session' don't get removed when they expire. Each maximum age should be defined in the config and the CLI module should get two new cleaning-methods for use in cron-jobs.
Also, the maximum session age config value should be used for specifying the expiration date of the session cookie.