How we found and fixed a rare race condition in our session handling