Session service (back-end)