Attempt fixes for session validation in endpoints (unfortunately we cannot do...

Attempt fixes for session validation in endpoints (unfortunately we cannot do IP validation; so make session IDs longer)