NO_SESSION invalidates the session now