Use same length and format for both session cookies