Added basic callback assurance.
Updated createSession to expect app_id parameter.