title: Session_id is visible in page source, is it ok?
body: <p>I'm sending the <code>session_id</code> with the javascript. The <code>session_id</code> is visible in source of the page like:</p>
  
  <pre><code>function startUpload(id){
      var queryString = '&amp;' + $('#new_doc_upload').serialize() + "&amp;session_id=" + "01dfda2def225bae907b129d2ffb1";
      $('#fileUpload').fileUploadSettings('scriptData',queryString);
      $('#fileUpload').fileUploadStart();
  }
  </code></pre>
  
  <p>Is it ok that the <code>session_id</code> is visible or can is it a security issue?
  Thanks.</p>