Actually use injected session strategy instead of HTTP session.