I'm writing code to rewrite URLs in JavaScript to support AJAX requests for clients that have cookies disabled. It appears that the right thing to send would be the value returned by (session-cookie-value), not the value returned by the exported (session-string). Should 'session-cookie-value' be exported from the 'hunchentoot' package?