session_repository: there maybe more than one session object living in the application.

Interface changed to take this in account.