Fix: only destroy session when needed, too.