session id sent to e-mail, closes #7