Propagate the browser fingerprint (or session token) by a different method than the session identifier when possible. Propagating the session identifier in a cookie and the browser fingerprint (or session token) on the URL is a good approach.