Browser network sniff test (with session token)

Same as network-sniff-test.html, but a ?session=... token is generated at runtime and appended to the URL before it's fetched - the token itself never appears anywhere in the page source, only in the actual network request. Only browser-network-sniff can see it.