require ISession.invalidate to leave behind a usable session