fix #249

@@ -217,24 +217,23 @@ func (manager *Manager) SessionRegenerateId(w http.ResponseWriter, r *http.Reque
 //remote_addr cruunixnano randdata
 //remote_addr cruunixnano randdata
 
 
 func (manager *Manager) sessionId(r *http.Request) (sid string) {
 func (manager *Manager) sessionId(r *http.Request) (sid string) {
-	b := make([]byte, 24)
-	if _, err := io.ReadFull(rand.Reader, b); err != nil {
+	bs := make([]byte, 24)
+	if _, err := io.ReadFull(rand.Reader, bs); err != nil {
 		return ""
 		return ""
 	}
 	}
-	bs := base64.URLEncoding.EncodeToString(b)
 	sig := fmt.Sprintf("%s%d%s", r.RemoteAddr, time.Now().UnixNano(), bs)
 	sig := fmt.Sprintf("%s%d%s", r.RemoteAddr, time.Now().UnixNano(), bs)
 	if manager.hashfunc == "md5" {
 	if manager.hashfunc == "md5" {
 		h := md5.New()
 		h := md5.New()
-		h.Write([]byte(bs))
-		sid = fmt.Sprintf("%s", hex.EncodeToString(h.Sum(nil)))
+		h.Write([]byte(sig))
+		sid = hex.EncodeToString(h.Sum(nil))
 	} else if manager.hashfunc == "sha1" {
 	} else if manager.hashfunc == "sha1" {
 		h := hmac.New(sha1.New, []byte(manager.hashkey))
 		h := hmac.New(sha1.New, []byte(manager.hashkey))
 		fmt.Fprintf(h, "%s", sig)
 		fmt.Fprintf(h, "%s", sig)
-		sid = fmt.Sprintf("%s", hex.EncodeToString(h.Sum(nil)))
+		sid = hex.EncodeToString(h.Sum(nil))
 	} else {
 	} else {
 		h := hmac.New(sha1.New, []byte(manager.hashkey))
 		h := hmac.New(sha1.New, []byte(manager.hashkey))
 		fmt.Fprintf(h, "%s", sig)
 		fmt.Fprintf(h, "%s", sig)
-		sid = fmt.Sprintf("%s", hex.EncodeToString(h.Sum(nil)))
+		sid = hex.EncodeToString(h.Sum(nil))
 	}
 	}
 	return
 	return
 }
 }