add helpers to verify client's session state