only reset session cache with lock