Using strong pseudorandom strings as session IDs to prevent client conflict