Turns out that's redundant -- the 'not' handles the case of len(session_key) == 0.