share impersonation session data with regular session data

this PR fixes #109
Yes, good catch.