fix URLs so that sessions keys are enforced as strings
make sure we enforce strings for session keys with move to JSON for django 1.6