SessionHandler fully thread safe