"Unprivate" constructor of http.session.Session