Application: All users share the same Object, and always get the same data. (similar to a Singleton Pattern). It will be created at the first request after Application start, and destroyed when the Application dies.
Session: A User gets its personalized version of an Object (he gets his 'own copy'), the Object can store User/Session-specific Data. It lasts for the period of a session, and keeps the data inbetween requests.