make session names unique

Use sha1 hash of user email as part of sessionid.
This avoids possible sessionid clash between two closely resembling email ids.