update session error responses to be more direct