Leave Session.create responsibility to the SessionStore