Opaque identifier used by servers to ensure session state is not shared between applications. Unused by clients.