To see if a session is expired, set a key/value in the session when
the user logs in. If you're setting their username when they log in,
then you only need to check something like
if self.session.has_key('username'):
That will tell you if they've logged in. If they haven't logged in
with that session then that value won't be set.
I'd need more information about the multiple sessions you are seeing.
Are they all from the same ip? Session works by comparing against a
cookie in the browser, and optionally (but set on by default) the ip
and user agent.