Refactor the method signature to be less ambiguous and update all
usage to ensure session data is passed as a hash via a keyword arg.