remove x-session-id handling (not used by HTTP API anymore) and general refactoring on manual ajax calls