-remove logic for somewhat overkill check to see if session object is valid