Regenerate session id to avoid hijacking