Better session management

It is currently undefined when a session is created during execution, and it is hard to ensure whether the session should be immediately closed (for unlocking) after being read. This is module-dependent and should be done before calling Module::output().