UID and session_id are required