pw security check on cached session return