[Session] Construct verification URL manually to not re-use SCRIPT_NAME.