much more sensible session key length and general handling performance issues