Validate ClientHello session_id field length and send alert on failure