Yes, I absolutely do need to check for NULL. Good catch. My current code is smart and won't call this method if the session fails, but I should not rely on that.