nil sessions are nil