/edit return 400 if no session. User can logoff