User management / Session management question

Hello!

we are using Enhydra for quite a while and works for use very well. We have 
our own user / group / right management and use sessions with cookies. For 
this I have threequestions:

1) How can I get a list of all active session? At best with the related 
session data and the last requested presentation object? I want to use it for 
a admin page so the admin can see who is logged in.

2) How can I throw away a session? When the user logs out I want to be shure 
that the cookie is no longer valid.

3) We have our own user / group / right management? Should I implement the 
interface com.lutris.appserver.server.user ? Where is it used? The api docu 
says: "its compared in many places". What is it good for?


-- 
Dipl. Inform. Boris Klug, control IT GmbH, Germany