Function getSession() does now only use secureString() if no database