Refactor 2: make callers responsible for sessions

[msm-cert]

Your checklist for this pull request

• [x] I've read the contributing guideline.
• [x] I've tested my changes by building and running mquery, and testing changed functionality (if applicable)
• [ ] I've added automated tests for my change (if applicable, optional)
• [ ] I've updated documentation to reflect my change (if applicable)

Second round of refactoring - move session management out of the database object (to make atomicity easier).

Beware of the dragons, this code has a long history of concurrency bugs. In the previous version, there was an implicit commit all the time... I'm not sure there are no places where i should call .commit() directly, but so far it works in my tests.