raise if invalid session and not trying to log in and not having user