check querystring for "sessionkey"