> that reloaded page can contain current session id, right Right, through cookies - unless you want to embed the session ID in every single link or button in t

> that reloaded page can contain current session id, right Right, through cookies - unless you want to embed the session ID in every single link or button in the whole page. The way pages "contain" session data like that _is_ cookies! snapetom mentions embedding in query parameters, which while a possible solution, seems even worse to me, as it means sharing a link to the current page you're on leaks your session token. I'm really not sure I'm following what you're saying here.