`request.session` should be a dictionary, not a string.