Am I right that it's possible for a session var to exist at one point in a request, then not exist later in that same request, without having been deleted in code? Session vars can expire mid-request?