The session and its update need a bit of rethink, to help users saving it in a DB. Fortunately, the rest of the API's design is compatible with this type of requirement.