added permission validation to backpack connect session model.