session ID length and session ID regenerate