Treat the session as active when the user cancels the request - this means the app gets useful feedback when a user cancels a request for additional permissions (this behaviour matches how the Android plugin works).