session: disallow destroying the null session