getting the synapse versions, asking if an alias is available, and initi...

...ating a new session do not need to be authenticated requests (so don't spend time looking for the session token cookie)