Remove private methods from session handler. Closes #3759