don't store private public-share-key in session
we no longer need to keep the session open for encryption