*fixed: session management
*added: spinlock guard