Remove '*' from distributed session id alphabet

The set of chars used to make up session ids for distributed sessions includes ''. This causes problems with session passivation if FileCacheLoader is used, since the session id becomes part of a filesystem path and '' is an illegal char on some filesystems.