Made DBSession#conn package private, now #connection is the only public API