I don't think we need a write lock here either, since we are reading but not modifying the session list (maybe switch to a const_iterator just for good measure?  I suspect we do need the per-session lock, though..