sessionid not in GET