removed reference to JSESSIONID for potential replacement with generic cookie #16