make session_id unique
send no-cache to browser when there is a session
update docs