Why the `hasOwnProperty` check vs. `req.session && req.session.debug`?  Does that error out?