Can you explain the distinction between the kinds of handlers which require sessions as contrasted with those which require valid sessions?