dont check for urlsafe session id with client cache