Remove session manager; pass session id with each request