Guard SSL.session against looking up something that's not there