Defer session create

[FrankChen021]

Prevent from returning a lot of session objects where users send invalid service request message on the connection