Actually use SessionData instead of Hash (TORQUE-1016)

This ensures in testing scenarios our real session store and this
fallback one behave the same.