Allow only session owner to remove it