session: ignore unregistered session id completely