if it's defined, then we want the extra check that the jids match, otherwise
we might be attaching to someone else's session.