I avoid session usage at all costs (with the exception to the rule being the logged in userId)
Why not pass the parameter values in your events so the app is stateless? Also, remember that page. onActivate(...) is called for page render and ajax events so sometimes it's better to initialise here instead of @SetupRender.