correctly check that user is logged into metacat before proceeding
use null session for now
draft of legacy-to-d1 account mapping interface