The location of the session key if supplied with a web service request. Valid values are 'query', 'header' or 'cookie'.