Session object should be set at a higher level