add xhr_replace helper. use unique session cookie name.