and debugged the handling of parameter serialization so that I think it can actually pass now...
also tweaked the session code to allow session types other than standard HTTP cookie-based sessions. The XML-RPC code doesn't do anything interesting yet.