If the session doesn't have a payload UUID we now generate one as best we can. This code will probably go away when TCP related transports have had the UUID stuf baked in.