Don't set the appId and userId on the session until after we check whether a session is already running or not