[improvement] use UUID as our session id