Bad sessions are handled badly

If we get invalid session data, we crash horribly.