Form.sess_id=&Form.sess_key= <- thats the stuff you remove from your URL. I've traded marketplace links with 2 of my very close friends many times, and it happens every time, usually the only time i notice it is when i go to my wishlist and i dont recognize ANY of it. Lucky us the new marketplace gets rid of that security hazard.