Validate session cookie value is a UUID before using it as a storage key

Validate session cookie value is a UUID before using it as a storage key #824