Fix session validation