Protect auth failures from trying to revoke nonexistent sessions