session id is now in the url instead of the scope