Use an RLock for session locking.