if different userclass is passwd to singleton, verify that session is valid