Only regenerate session ID on login.