WebSession: fix issue with attribute access