add resource type handling, so that LoginRequired handler only acts on the correct session object