Use the same lock object to protect sessionData and sessions, to avoid deadlocks.