server/upload-health.py: sanitize session name forbidding / in it