Fix checking bypass on initialize

[aromaa]

Fixed that checking bypass on handlers initialize would always return false. Not really sure if this is the best approach.

Also removed the SessionManager#createSession because it was making this a bit more complicated and its not really used.