session checking pulled to dectorator, refs #13