Checking the current Cognito session without exposing credentials.