How would you implement session management in a distributed system?