Both of these have been fixed. Thanks for pointing out the off by one error and redundant session.add()