Generate session IDs with uid-safe

closes #51