Use a session-specific event file

At the moment the default.hepmc filename is hard-coded, but actually we don't want the database to have everyone's files stored globally (clashing, and violating privay expectations). Better would be that each connected session has a single identified file/event set, and that we purge them as sessions expire.