Fix session handler lock