sessions are accessed from multiple threads