#58 Add missing session key checks