If a Session is provided to Facebook/Login it will be authenticated, if it's left out a new session is created and authenticated