On auth failure just free the session.