Call this periodically to clean up old session files. The finalizer param can cancel the deletion of a file by returning false.