session handling redone to make better use of session ids