now mutex protects session_manager methods