This helps improve session security, as it reduces the opportunity of replaying a session id successfully. Fixes #836