everything is called from within the SessionHandler thread with the exception of the public methods (which send messages to the SessionHandler so afaik everything is safe from multiple user threads. Is my understanding incorrect?