session: make port range configurable