[HttpFoundation] implement session locking for PDO