only check if the session is valid if it actually exists, otherwise - default behavior