[+BUGFIX] (Object): Session objects with fallbacks
In some (rare) cases it can occur that the session contains some
wrong data; which is why we cannot expect it to be an array in
all cases. It is quite hard to reproduce, but sometimes it happens
when fatal errors occur in the run of a request.
If we cannot read consistent data, we degrade gracefully and store
an empty array in the session.