use the hostname as the session ID instead of the hard coded local to make intrusion a little more difficult