Don't lowercase session username
Make SessionEvent cancellable and use this feature in command executors