Yes, you can create your own "session" management approach, keeping in mind the following:
2. Serializability - your class implementing your sessions should be serializable for ease of storage on disk or database.
3. Life cycle management - you will need a way to clean up after a session life is ended.