User::isSafeToLoad() should return false if MW_NO_SESSION