Be consistent in session "private" variable names
We have sessions data which are set by LL::NG and other which come from UserDB backend.
Some of variables set by LL::NG are prefixed with "_" but not all. We can maybe work on this for 2.0
See also http://lemonldap-ng.org/documentation/latest/variables