Fix for #470 - Multiple sessions generated on first page visit

Hey guys I've added a fix for #470 - can you check this over and see if there are any side effects? I've run my own tests and it seems to work well. The change prevents ESI and AJAX calls from generating sessions.