Add invalid session validation