fixing a bug where multiple requests on the same session did not validate