remove usage of session as state store

- add router_id as path element
- remove need for passing of email, hostname and location type