'If a session has already been created or looked up with
L{Request.getSession}, this will return that object.  (This will always
be the session that matches the security of the request; so if
C{forceNotSecure} is used on a secure request, this will not return
that session.)
@return: the session attribute
@rtype: L{Session} or L{None}'

@property
def session(self):

    if self.isSecure():
        return self._secureSession
    else:
        return self._insecureSession
