I benchmarked JCR Sessions and discovered that using the same session again and again or renewing the same session each time lead to equivalent results.
So we could drop the Session pool.

Furthermore, we should avoid to create too many JCR Sessions per HTTP Request.