We move the session address to the top-level struct, since it's needed in a bunch of places. This change is required for the rate-limiting code that is coming next.