Fixing this method largely depends on where it is called.

If the presumption is "Snapshots are mostly used for offline players and saving content" then we can safely add a protected constructor to SpoutPlayer ad do a null session. Javadocs will be needed to explain the only potential way for getSession to not return a valid reference.

I haven't looked at the code but I am guessing the engine does not use a snapshot to load an entity in. In that case, we are fine.