Fixed a session bug, SESSID is a domain wide cookie from now.