Removed check in the session handler to allow signed in users to sign in as another user.