prevent avatar call leaks outside of a valid session