stricter session ID context matching