added regex checking for session ids
persisted sessions