Transactions are not multi-session safe

[eric-wieser]

Consider:

a = Session()
b = Session()

add_images_to(a)
add_images_to(b)

a.commit()
b.rollback()

a.commit will commit bs images as well, because _stored_images is global state! It should be session-specific state.