session key check