fetch HTTP headers only once
added support for "Session-Id" HTTP header; added support for passing plain session-id's