Looping until generated sid is unique

as with rack/session/memcache, and also opening up new opportunities for redis leakage!