fix(session): initialize data lazily in save() to prevent uninitialized property access

fix(session): initialize data lazily in save() to prevent uninitialized property access #627