Potential fix for https://github.com/otdoges/zapdev/security/code-scanning/51

To fix the problem, replace the use of Math.random() for generating the session ID with a cryptographically secure random value. In Node.js, this can be achieved by using the crypto module's randomBytes function. The fix should be applied only to the code that generates the session ID in the createNewSession method (line 154). Additionally, the crypto module should be imported at the top of the file. All other functionality and logic should remain unchanged.

Specifically:

• Add import * as crypto from 'crypto'; at the top of the file.
• Replace the session ID generation with one that uses crypto.randomBytes to obtain a secure random value, e.g.:

  id: `session_${Date.now()}_${crypto.randomBytes(9).toString('hex')}`,

Suggested fixes powered by Copilot Autofix. Review carefully before merging.