make session property protected to allow subclassing