two-way communication is working
func for session id
basic session id generator
session id is now secret + timestamp
handling existing sessions
cookies