#9

- added user ownership and session state validation