I might be wrong but for me this only seems to happen when the url I am using is blocked by my firewall from storing cookies on my machine.
As I understand it sessions in PHP will use a client side cookies if it can to pass the data but failing that will use the URL.
If this is correct then you can stop it happening for yourself by allowing cookies but it will happen for others and there is little you can do to avoid it using the normal session processing.