## Release note

Each session now carries an `alias`: a short URL-safe name, random by default, that a consumer can replace with its own name through `SetSessionAlias`. It is returned by the sessions API and the status stream, so a page can give every tab its own address without exposing the session id.