Fetch xid on insert
store edits in user session, check for invalidated objects for pages from ES.
Only set session cookie for web users