experiment with explicit session locking