Using request.session.session_key to get the session key, instead of accessing the cookie