Erase this bad practice. Moreover with a low STATE_DURATION, keep session headers has no interest anymore.