Use a more correct error message

-1 is a valid session ID, even though it's a fake one.