new protocol changes insecure fallback UX

Handle the UX case where SMS/MMS fallback is an option but a secure session does not exist.