Change passing session token from query to header.
Add HTTP cache support.