Introduce a Decorable mix-in to allow modules to attach data to common session objects

For example, this will allow modules to decorate the Client object with private data, without having to expose that private data to every module. It's a form of dependency injection or dynamic type extension.