there is no minimum length for session IDs