Fix not to issue session if user unauthorized.