Check both session userid and username