also no longer update access-log in session-class destructor, as it fails with skipping permanent logging for WebDAV and others