libs/web: Add an additional sanity check to Session IDs