Use uid-safe for default session ID

[dougwilson]

https://github.com/jonathanong/uid-safe

/cc @jonathanong

Just waiting to include it with the rest of the 2.0 changes, since this will change the character set of the IDs a lot.