Hmm, I see your point.  Using session.get would use the following, which is prolly not as clean as the try/except approach...

    account = session.get('account', self.request.params.get('account'))
    username = session.get('username', self.request.params.get('username'))

So, feel free to leave it as is.