This causes the requesttoken to be set to true.
Is this check really necessary? Afaik we had the idea to initialize OC::$session with a dummy in memory implementation.