don't do user validation during session launch