Before we attempt to perform an action we should check the session.
Currently there can be problems with the session expiring or becoming invalid silently (eg. a PDS migration, session revocation) and the user isn't told.
We can push them to the reauthenticate flow, perhaps with some custom additional copy explaining what's going on.