Refactor: Session.shared_with should point to Customer