I think the pattern we're slowly coming to is "inject the Session as a field, then use it with the *Services".