regenerate session id after login / logout