Fix permissions on other users' sessions

[agilaz]

Should not be able to edit route count on other user sessions. Looks like this is done correctly for normal sends, but might be broken for partials