Ensure sessions with different auth IDs are not shared.