auth.trackSession sends several times null to callback before sending session object
auth.trackSession
null
closes #33 (closed)