better checks of session[:account]