naming of session allowing alphanumeric characters