I think that here we are ensuring that the feature works, if we let someone to inject something else more than a session we could have some problem