cancel secure the session id

and update the sessionid length from 24 to 26