#3073 (feature/session): Validate incoming session IDs