fix sessionID generation