Remove PHP session id parameter when canonicalizing URLs

Some really old PHP deployments still use URL parameter PHPSESSID for keeping track of user sessions. Those parameters should be removed during canonicalization.