Prevent making user session token/cookie value available to web front end users, now only show half of the token if necessary.
Standardised session token/cookie value to 36 characters long.