Currently XMLRPC session tokens are stored in process memory, which means sticky sessions are necessary in a scale-out/HA setup.
This is a violation of principle VI of the Twelve Factor-App manifesto, and could be addressed by supporting different backing stores for sessions.