Fix current session counting

Fix current session counting

Instead of trying to manually parse PHP session serialization format,
use the session_decode() function to do the heavy lifting for us. We
need to do some session gymnastics to make this work properly
(session_decode() will overwrite the current session data), but it
works.