# config/initializers/01_session_security.rb

module SessionSecurity
  def generate_sid
    sid = SecureRandom.hex(32)
    sid.encode!(Encoding::UTF_8)
    sid
  end
end

ActionDispatch::Session::AbstractStore.include SessionSecurity