for now accept invalidated sessions,