add sessionid to request header