Moved session identifier to SHA256 hash made up of 16 random bytes taken from a cryptographically secure pseudorandom number generator