session remembers client validity

session object remembers validity of client when successful answer to
challenge received