Fix sessions path to avoid passing user id.