sessionId must not blank!