Added method stub for session membership check and fixed HTTP code assert

Use this method to implement further checks on session membership.
The old HTTP code assert should never be reached because an
UnauthroizedException should have been thrown first.