use session id instead of a unique id for backup cache buster
fixes #425