Make session attribute access a protocol to avoid reflection.