move from session-identifier header to x-session-identifier