a little fix for a case, when req.session is not there
a little fix to avoid pointless call to showError()