Check for session and then check for user in session.