No longer send the sessionId in the api calls; the server should fetch

it via the cookie instead.

@@ -206,7 +206,7 @@ define(function(require) {
             }
             function api(apiName, data) {
                 var apiHandler = globalOptions.api || function(apiName, data) {};
-                return apiHandler(apiName, data, {sessionId: self.get('sessionId')}).always(function() {
+                return apiHandler(apiName, data, {}).always(function() {
                     self.unset('errorMessage');
                 }).done(applyLoginResults).fail(function(xhr) {
                     if (xhr.responseJSON && xhr.responseJSON.errorMessage) {