5258: Fixed the sql injection issue with the session token variable when the browser cookie is disabled.