Inject session into components

Closes #364