Also check for , (comma) and - (minus) in the session ID (bug #601)