The link needs a session query string parameter.