Remove unimplemented reopen action
Don't allow searching users with nil session

A bit better authentication check