What exactly do you mean by "Implement visitor id correctly"? My understanding is that the Visitor ID service can only function on the front end (client side), i.e. the browser. That being the case, how is the Delivery API supposed to have access to the required artifacts (sessionID, ECID, etc.) ...