Yeah, I got this comment elsewhere too. I decided to not edit, because I think current standards at least strongly discourage session id's in urls, and this functionality is basically obsolete.

Sessions requiring cookies felt like a reasonable approximation, and I've already had to hedge so many other statements =)