fix concurrent session access