avoid getting a non-list from the session settings; hopefully fixes #519