Is it wise to simply filter out None values? If a value was tempered with by the client, it might make sense to invalidate the whole session. Otherwise, the client could "delete" a single variable from the session without affecting the others.