if no or an empty action is passed, use the active request Uri. Closes #1643
added logging to the session, to aid in debugging session loss
check all other locations before checking the URI for a session id