another one:

let userId = err.err.userId;
                let sessionHandle = err.err.sessionHandle;
                // we can now revoke this session or all sessions belonging to this user.
                // we can also alert this user if needed.

Here it says we can revoke session, but this is in catch block so session variable is not defined. How is this done?