1) If your ISAPI DLL will use multiple threads then yes set the ThreadSafe property to TRUE.

2) Leave the session connected.

3) If all your threads are using the same session (see #1 above) then there will only be one Oracle session.