Session IDs as Query Parameters Must Die | Hacker News Reader