public UserSession(string userID)
        {
            _sessionID = this.NewSessionID();

            using (new SessionScope())
            {
                SysUser user = SysUser.Find(userID);
                user.RetrieveAllAuth(); // 触发Lazy Read

                if (user != null)
                {
                    _logonInfo = new UserLogonInfo(user);
                }
            }

            _lastActiveTime = DateTime.Now.ToLongTimeString();
        }