pass session object on to uac if provided, to avoid creating new session object