was passing the full session_id instead of an sid