Fixed a nasty bugs where global session object state would blead to user session. Now session data is totally separate from session "prototype".