As per my other comment
`The user/session object should be for interacting with the current user or the current user's session. Anything working with all sessions should be in a different class.`

this function should only get it for the current user.