allow custom session IDs