first pass at more secure session IDs
avoid renaming built-ins...
and one more time
simplify id hashing
Merge pull request #23 from ericrasmussen/fix.session_id_generation

Fix.session id generation