Added session validation