(#122) - Don't claim req.session