Check for req.session first