pub const CAP_SESSIONS: &str = "sessions";
Capability: can hold one session (and its temp objects) across requests.