Added a session key to urls when logged in to prevent/mitigate drive-by attacks.