Ideal would have to check using `EquatableInterface`, but not currently possible as we don't use the Security component here to create a session (there is another story for that).