Internal discussion

For auditing purposes and in order to help users identify their active sessions, we keep quite a bit of metadata in the user_sessions table:

At the moment there's no mechanism to clear this data out and its usefulness to us decreases over time. We should pick a threshold and automatically get rid of anything older than that.