We currently have a very freeform API for sessions which allows great flexibility, but also makes it very easy to forget to clean up sessions. We should provide a withSession helper which implicitly creates a session, and cleans it up after the given operation is completed.