viewer URLs are now based on Box View session URLs