cache: scream loudly if cache operations with lock taks more than 100 ms
session: transform() should accept const session, since it doesn't modify it