Ensuring session parameter is in each remotely callable method - needed for permissions later