Bugfix in session implementation. Authenticity token and ID were not sent under some circumstances.