session: introduce new client-rejected signal
    
    If a client gets rejected because it's not allowed to connect
    to a particular session, we really need to inform the owner
    of the session object so it can do any clean up it needs to do,
    if necessary.