2.2.3.3 Session Identifier

State server implementations MUST treat the user session identifier as an opaque field.<3>

 session-identifier = stringtext