Add private attributes, fix sessionid