The PHPSSID shows up because when the page first opens, $_SESSION sets a cookie but does not know whether you accepted it until the next page, so it adds the PHPSSID to the links and inside the forms 'just in case'
I copied that from a comment I made in a post entitled PHPSSID which was a few posts down the board when you posted this 😃