Users at IIS web sites will have a session devoted to them but not a likely a dedicated thread.

Imagine one hundred threads for one hundred users. It's silly. The locking and the like of threading is really not a user-based bounds thing. Spin up different threads when writing flat files en masse, but not to manage user boundaries.