Verifying session and role.