(Oh you'll want to unescape that session ID string as well)