Session ID should not be static