collector: tracking jsessionid so don't auth any more than have to.