Even if there is no `rack.session`, treat appropriately