One tried and tested way to work this out is to draw up CRC cards for each of your classes and imagine the conversations" they would be having with one another, such as some MVC controller asking the Request it is servicing which Session it belongs to, and what User is associated with that.