Every web request currently parses an encoded session ID into 2 strings, one for the decoded session ID, and another for the route. Another set of strings is generated when determining whether the route for the current session has changed. This results in the allocation and copying of several sets of char arrays, most of which can be avoided.