- allow the use of a header to specify session id