Use stream-based directory listing sessions invalidation

There is no need to accumulate in memory all the list
of files in the websessions directory: the streaming fashion
is enough to cycle and remove all sessions.

Change-Id: Id780f6c44ffada8f65e66fc1a802f084c685c636