The session object is defined as follows:

def __init__(self):
    self._creation_time = time.time()
    self._db = False
    self._uid = False
    self._login = False
    self._password = False
    self._suicide = False
    self.context = {}
    self.jsonp_requests = {}

session.authenticate returns the UID so for all practical purposes this is the session id.