Fixing issue #558: Wrong sessionId used in dlform

Taking sessionId sent by the client, instead of the one used by the
Security-Proxy.