Hook into the Session object instead of Providers and such

[moschlar]

Like noted on #211, it would maybe be easier and less code to hijack the Session object for the filtering stuff.