typo in invalidsessionid catch