Guard against bad session id generators