I remember from my ASP days that I didn't favor putting objects in the session. One reason I can remember is that if a user managed to leave a session open unexpectedly, you'll have a bunch of zombie objects living on your server until their session expires.