Added rack session ID spoofing