working out a session check before allowing action to be rendered.