isLoggedIn is overkill
Clean up session passing