The session verification on the backend happens in a stateless manner. That is, it doens't query the core for session verification. It queries the core only for creation, refresh, recoking of sessions.