It's pretty straightforward to host an application for 1 user, the session is just forced to run only the application

But then if you want to have multiple, anonymous, users accessing the application at the same time, without sharing data, it gets tricky