fixed missing app. session id in submitted post variables