Fixed session ID validation.