ensure passport session exists before trying to modify it