Simple test of session locking by keeping a request counter in the session