// there is no session to this message...that's a problem
final ErrorResponseMessage errorMessage = new ErrorResponseMessage();
errorMessage.setSessionAsUUID(RexProMessage.EMPTY_SESSION);
errorMessage.Request = message.Request;
errorMessage.ErrorMessage = "Cannot make sessionless requests with <security> turned on.";
errorMessage.metaSetFlag(ErrorResponseMessage.AUTH_FAILURE_ERROR);
request.writeResponseMessage(errorMessage);
ctx.write(request);
return ctx.getStopAction();