"session" should be a constant.