even if user id in the session exists, check it in the database.