1. A method in a host organization, the method comprising: receiving a request at the host organization from a client device, the request specifying an application available via the host organization, wherein the application comprises a stateless application which maintains no state specific information regarding the client device between interactions with the client device; generating, via an application extender, a user session unique to the client device in a memory of the host organization; creating, via the application extender, a user session data table within the user session of the memory to maintain the state specific information regarding the client device between a plurality of interactions with the client device on behalf of the stateless application, the user session data table defining one or more cells within the user session data table which are updateable or non-updatable; wherein creating the user session data table comprises creating the user session data table based on metadata associated with the application specified by the request; and wherein the metadata defines a structure for the user session data table based upon which the user session data table is created; processing update data from the client device via the application specified by the request on behalf of the client device; updating the user session data table based on the processing by validating the update data against the one or more cells within the user session data table according to which are updateable or non-updatable; and transmitting a response to the client device.