Why does SessionHandler need to know about its owner?
I think this field is redundant: it is just an extra circular reference.