Handle bogus session tokens.