for now accept invalidated sessions in sotre