Should probably return a copy instead of the session itself (or a pointer to it).