Passing clientSessionId as a query parameter is inappropriate and makes logging more complicated than it needs to be, make it a cookie.