I think I don't like this idea of putting an exploit into an infinite loop until session is created, but if other devs agree with the idea, then it's okey for me!