fix regex in session id spec