req.sessionID removed in favor of req.id