fix: Update tests for session_id behavior and timing tolerance

- handler tests: session_id is now assigned at creation time
- timing test: increase tolerance to 100ms for CI environments

Author: inureyes

src/server/auth/password.rs

@@ -641,10 +641,10 @@ mod tests {
         assert!(time_existing >= Duration::from_millis(90)); // Allow small margin
         assert!(time_nonexistent >= Duration::from_millis(90));
 
-        // The times should be roughly similar (within 50ms margin)
+        // The times should be roughly similar (within 100ms margin for CI environments)
         let diff = time_existing.abs_diff(time_nonexistent);
         assert!(
-            diff < Duration::from_millis(50),
+            diff < Duration::from_millis(100),
             "Timing difference too large: {:?}",
             diff
         );

src/server/handler.rs

@@ -1266,7 +1266,8 @@ mod tests {
         let handler = SshHandler::new(Some(test_addr()), test_config(), test_sessions());
 
         assert_eq!(handler.peer_addr(), Some(test_addr()));
-        assert!(handler.session_id().is_none());
+        // Session ID is assigned at creation time
+        assert!(handler.session_id().is_some());
         assert!(!handler.is_authenticated());
         assert!(handler.username().is_none());
     }
@@ -1328,7 +1329,8 @@ mod tests {
         let handler = SshHandler::new(None, test_config(), test_sessions());
 
         assert!(handler.peer_addr().is_none());
-        assert!(handler.session_id().is_none());
+        // Session ID is assigned at creation time even without peer address
+        assert!(handler.session_id().is_some());
         assert!(!handler.is_authenticated());
     }