Added a note about not storing user-defined classes in sessions