Clear the session on new logins so it doesn't get too big; more defensive with session get methods