will session always have the `'gh-username'` (once you're authenticated)?