Mention that session id's are globally unique.
Merge branch 'session-hooks' into hash-login-tokens