disabling session ids in uri