TODO: Re-storing the object back into the session at the end of the request. That's going to require some kind of end-of-request notification.