Don't allow mutation of the session headers during a request

Signed-off-by: Rick Copeland <rick@synapp.io>