a couple random routes didn't have :sessionId as optional

I'm assuming this is a mistake.
Does @jlipps agree?