There was a lot of unnecessary code in the main version of this, checking session objects that we know are created in the middleware.  Removed those checks; just grab what we need out of the session and return.