Configuration modules can handle info specific to application scope pretty well. But session specific information should be handled using environment variables or with some session handling modules.
Better to use a session handling module like Apache:Session.