Fix bug with add_wishlist_ajaxremove()

Valve now requires the user to pass their Session ID in order for an
item to be removed from their wishlist