if the user's session is not active, blah