You are trying to validate the form entry... not a session variable value. The only time you are validating against a session variable is when you are doing the CAPTCHA validation. The rest of the validations would only use the submitted form values.