For the "invalidate session on screen lock" feature, it is possible to create close enough workarounds in today's JavaScript.
https://stackoverflow.com/questions/15959244/
Bottom line, you can simply listen to mouse move events and invalidate the current session on user inactivity.