Fixed the problem with a user being logged out if they sent too many requests in at the same time.  Now their session id is only regenerated at login and logout