Bypass requests that don't have the expected session_key