No, it refers to a template object. What you posted still doesn't help, since we still don't see where session, user_status and session_id are used. We can't debug code we don't see!

By the way, how do you verify that $session contains something like 00-0000000000-00000000?