So far from what I can see your session.php doesn't work right. If I block cookies for your site I get different sessionid after each click - this is wrong.
When I alter user agent to "googlebot" it still attach sessionid which it shouldn't if you did the modifications right.