So yeas adding that after 285 will mean it wil alwys be set in the session state, if someone enables cookie policy options. We can override the UseSession anyway in startup but it might just save someone 10mins (I just found this when looking to see if session had changed at all in core) 😄