This should be more secure to generate session IDs - needed more random in there.