Make sure /session doesn't get cached