Currently sessions are handled specially by the application instance. Sessions should be encapsulated by a service instead