fix session_id form_key placeholder