malicious Ack removed

the started session is supposed to be acknowledged by the the loader and
not by the data source.