fixes a bug with HTTP session tracking