We don't actually want to expose sessions
To handle list params we'll need a generic normalizer
Major refactor to reconcile namespace issues.