This should be `session's` (that was my original mistake).