8-byte well-random hex session id
version upgrade, db upgrade script, 16-btye session id