Return 200 but no data when user has no session