make sure session._id is a string