revokeIfPresent

Revokes sessionId if it is currently live; returns false for an unknown/already-expired id.