Session validation listeners may return `null`, erroneously causing validation to fail

Ping @mwillbanks