- Non-urandom session generator now checks length of char string