Default CSS now valid. Session ID isn't regenerated where it can't be.