Sorry about the 'GET', it should have been 'POST', althought the result is the same. I tried it with newer session ids, and got the same result.
I will use your advice for the HTTP headers.
Do you know if there is another way that a website stores info besides cookies and session IDs?