generate unique session key instead of id.