use /dev/urandom to create session_ids