#42 Implement session tracking for administrative users

[Philipp]

There is no real session tracking ("touchSession") for administrative accounts using the web facades, which should be enabled for every method call.