public SessionDAO getSessionDAO() {
        return this.sessionDAO;
    }
Default business-tier implementation of a {@link ValidatingSessionManager}.  All session CRUD operations are
delegated to an internal {@link SessionDAO}.

@since 0.1
core/src/main/java/org/apache/shiro/session/mgt/DefaultSessionManager.java