Hash backend session IDs before storing them in the DB.

Just a bit of security paranoia.