Fix a bug where user-agents could specify their own session ID.
Merge pull request #1 from Acidity/feature/fixCookies

Fix a bug where user-agents could specify their own session ID.