[mms] Regenerate session IDs during an active session to protect against session fixation attacks.