explicit session render (rendered form header request token)