request.session might not exist