I also noticed that when a method calls another method on the server, the inner method is supplied `sessionData` from the Server object (which doesn't have the `sessionData` field).  I marked this with an "XXX" as well.