accept(false) for !sess && !sess.userId (we were accpeting true before
due to bug at https://github.com/codeparty/racer/issues/37, but maybe
we should be returning err() instead?)