makes the sessions per javascript window, not using cookies