xhr_send returns 404 in case of bad session requested