spawn new session if bad session id given
generate unique session id for each new session
log warning message if unknown session id is requested