Inbox

No session. Until FLT-5 wires the real provider, a dev session is the x-session-ref request header naming an identity the installed provider knows.