getHostUp enforces session id, races fixed.