It looks like AppCivist is using `SESSION_KEY` for a HTTP header, but this is not standard as `_` are not allowed in HTTP header names.
It looks like AppCivist is using
SESSION_KEYfor a HTTP header, but this is not standard as_are not allowed in HTTP header names.