Sessions can be owned by both servers and clients