`delete_session` is pretty much the same as `put_session` except by this line. Maybe create a private `update_session`?