I removed this in line with our discussion on other PRs, but it causes the tests on Varnish 3 to fail. Should I change the Varnish 3 VCLs too, to work without the `SessionId` header? Or do you want me to revert this and do that refactoring in a separate PR?