TheTXI and DevelopingChris provided best practices, but here is the final answer to your main question: only you can tell if the session is too big. If you do not encounter memory problems on your web servers (or traffic between websites and the state server, if you use an external state server), your session is not stored too much; if so then that.
, , , , , , , , , , , .