The user/session object should be for interacting with the current user or the current user's session. Anything working with all sessions should be in a different class.